专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

21. 发明授权

US09104458B1 Managing virtual computing nodes using isolation and migration techniques 有权
标题翻译：使用隔离和迁移技术管理虚拟计算节点
公开(公告)号：US09104458B1
公开(公告)日：2015-08-11
申请号：US12895265
申请日：2010-09-30
申请人： Eric Jason Brandwine , Stephen E. Schmidt
发明人： Eric Jason Brandwine , Stephen E. Schmidt
IPC分类号： G06F9/455 , G06F9/46 , G06F9/48 , G06F9/50
CPC分类号： G06F9/45558 , G06F9/4856 , G06F9/5077 , G06F9/5088 , G06F2009/4557 , H04L41/0896
摘要： Systems and method for the management of virtual machine instances are provided. A network data transmission analysis system can use contextual information in the execution of virtual machine instances to isolate and migrate virtual machine instances onto physical computing devices. The contextual information may include information obtained in observing the execution of virtual machines instances, information obtained from requests submitted by users, such as system administrators. Still further, the network data transmission analysis system can also include information collection and retention for identified virtual machine instances.
摘要翻译：提供了用于管理虚拟机实例的系统和方法。网络数据传输分析系统可以在执行虚拟机实例时使用上下文信息来将虚拟机实例隔离并迁移到物理计算设备上。上下文信息可以包括在观察虚拟机实例的执行时获得的信息，由诸如系统管理员的用户提交的请求获得的信息。此外，网络数据传输分析系统还可以包括用于识别的虚拟机实例的信息收集和保留。

22. 发明授权

US09076013B1 Managing requests for security services 有权
标题翻译：管理安全服务请求
公开(公告)号：US09076013B1
公开(公告)日：2015-07-07
申请号：US13037265
申请日：2011-02-28
申请人： Donald L. Bailey, Jr. , Eric Jason Brandwine
发明人： Donald L. Bailey, Jr. , Eric Jason Brandwine
IPC分类号： G06F11/00 , G06F21/62 , H04L29/06 , H04W12/06
CPC分类号： G06F21/6227 , G06F21/577 , H04L63/0272 , H04L63/1433 , H04W12/06
摘要： Embodiments of systems and methods are described for managing requests for security services to a provider of computing resources. In some implementations, a user can request that security services be provided to analyze or test a target network. For example, the user can request that security services conduct penetration testing of the target network in order to detect vulnerabilities with the target network's security infrastructure or configuration. The computing resource provider can dynamically provide the security services to the target network, for example, by instantiating one or more virtual machines that begin security testing of the target network in response to the user's request. In some embodiments, the provider of the security services may instantiate a security virtual machine instance (VMI) that can be connected to a customer's network using a secure connection, such as a virtual private network. The virtual machine instance can be physically located outside the customer's network while functioning as part of the customer's network. Thus, the security VMI can test security from either outside the network or from inside the network. In some embodiments, the VMI may test at multiple locations of the customer's network, for example, by establishing connections to multiple locations on the customer network.
摘要翻译：描述了用于管理对计算资源提供商的安全服务的请求的系统和方法的实施例。在一些实现中，用户可以请求提供安全服务以分析或测试目标网络。例如，用户可以请求安全服务进行目标网络的渗透测试，以便利用目标网络的安全基础架构或配置来检测漏洞。计算资源提供者可以动态地向目标网络提供安全服务，例如，通过实例化一个或多个虚拟机来响应用户的请求开始目标网络的安全测试。在一些实施例中，安全服务的提供者可以使用诸如虚拟专用网络的安全连接实例化可以连接到客户网络的安全虚拟机实例（VMI）。虚拟机实例可以物理地位于客户网络外部，同时作为客户网络的一部分。因此，安全性VMI可以从网络外部或从网络内部测试安全性。在一些实施例中，VMI可以在客户网络的多个位置进行测试，例如通过建立到客户网络上的多个位置的连接。

23. 发明授权

US08719131B1 Allocating financial risk and reward in a multi-tenant environment 有权
标题翻译：在多租户环境中分配财务风险和报酬
公开(公告)号：US08719131B1
公开(公告)日：2014-05-06
申请号：US13434283
申请日：2012-03-29
申请人： Gregory B. Roth , Eric Jason Brandwine
发明人： Gregory B. Roth , Eric Jason Brandwine
IPC分类号： G06Q40/00
CPC分类号： G06Q40/06
摘要： Multi-tenant resources can be funded using payment submitted with requests for those resources, such that the resources do not need to be associated with a specific user account. A resource can be allocated and available as long as payment has been provided. If a user wants the resource to be available for additional processing, for example, the user can submit another request with additional funding. The funding can come in the form of donations from any user, or in the form of investments where the investor expects some return on the investment in the form of revenue, visibility, or other such compensation. One or more management components can track funding for various resources, can accept and select bids for period of sponsorship, and can manage various donation models.
摘要翻译：可以使用通过对这些资源的请求提交的付款来资助多租户资源，使得资源不需要与特定用户帐户相关联。只要已经提供付款，就可以分配资源。如果用户希望该资源可用于额外的处理，例如，用户可以以额外的资金提交另一个请求。资金来源可以是任何用户的捐款形式，也可以以投资形式投资，投资者希望以收入，可见度或其他此类补偿的形式预期投资回报。一个或多个管理组件可以跟踪各种资源的资金，可以接受和选择投标期间的赞助，并可以管理各种捐赠模式。

24. 发明授权

US08683560B1 Techniques for credential generation 有权
标题翻译：凭证生成技术
公开(公告)号：US08683560B1
公开(公告)日：2014-03-25
申请号：US12981231
申请日：2010-12-29
申请人： Marc J. Brooker , Mark Joseph Cavage , David Brown , Kevin Ross O'Neill , Eric Jason Brandwine , Christopher Richard Jacques de Kadt
发明人： Marc J. Brooker , Mark Joseph Cavage , David Brown , Kevin Ross O'Neill , Eric Jason Brandwine , Christopher Richard Jacques de Kadt
IPC分类号： G06F7/04 , H04L29/06 , H04L9/32
CPC分类号： H04L63/08 , G06F21/44 , H04L9/3247 , H04L63/10 , H04L63/20
摘要： Systems and methods for managing credentials distribute the credentials to subsets of a set of collectively managed computing resources. The collectively managed computing resources may include one or more virtual machine instances. The credentials distributed to the computing resources may be used by the computing resources to perform one or more actions. Actions may include performing one or more functions in connection with configuration, management, and/or operation of the one or more resources, and/or access of other computing resources. The ability to use credentials may be changed based at least in part on the occurrence of one or more events.
摘要翻译：用于管理凭据的系统和方法将凭证分发到一组共同管理的计算资源的子集。共同管理的计算资源可以包括一个或多个虚拟机实例。分配给计算资源的证书可以被计算资源用于执行一个或多个动作。操作可以包括执行与一个或多个资源的配置，管理和/或操作有关的一个或多个功能，和/或其他计算资源的访问。至少部分地基于一个或多个事件的发生来改变使用凭证的能力。

25. 发明授权

US08533724B1 Virtual resource provisioning by assigning colors to virtual resources in multi-tenant resource pool 有权
标题翻译：通过在多租户资源池中为虚拟资源分配颜色来进行虚拟资源配置
公开(公告)号：US08533724B1
公开(公告)日：2013-09-10
申请号：US12973746
申请日：2010-12-20
申请人： Marvin M. Theimer , Eric Jason Brandwine
发明人： Marvin M. Theimer , Eric Jason Brandwine
IPC分类号： G06F9/46 , G06F9/455
CPC分类号： G06F9/50 , G06F9/45558 , G06F9/5005 , G06F9/5011 , G06F9/5027 , G06F9/5077 , G06F2009/45562 , G06F2009/45575 , G06F2209/5011 , G06F2209/502
摘要： Virtual resource provisioning may be enhanced by coloring virtual resource instances and/or underlying implementation resources. Particular resource colors may be associated with particular treatments during allocation of implementation resources to virtual resources. There may be different types of colors corresponding to different types of allocation treatment. Exclusory colors may be utilized to reduce clustering of virtual resources with respect to implementation resources. Assignment of exclusory colors to virtual resources can help strike a balance between lower costs through efficient implementation resource utilization and higher fault tolerance through spreading across an available implementation resource pool. Inclusive colors may be utilized to require and/or prefer allocation of virtual resources to implementation resources painted with the inclusive color. Proximity colors may be utilized to enhance a computational performance of a set of virtual resources. Proximity colors may be associated with proximity specifications that define proximity in implementation resource networks.
摘要翻译：可以通过着色虚拟资源实例和/或底层实现资源来增强虚拟资源配置。在将实现资源分配给虚拟资源时，特定资源颜色可以与特定处理相关联。可能有不同类型的颜色对应于不同类型的分配处理。可以利用独特的颜色来减少虚拟资源相对于实现资源的聚类。通过在可用的实施资源池中传播，通过有效的实施资源利用率和更高的容错能力，将独占颜色分配给虚拟资源可以帮助降低成本之间的平衡。可以使用包含的颜色来要求和/或更喜欢将虚拟资源分配给用包含颜色绘制的实现资源。近似颜色可用于增强一组虚拟资源的计算性能。接近颜色可能与定义实现资源网络中的接近度的接近度规范相关联。

26. 发明授权

US08495648B1 Managing allocation of computing capacity 有权
标题翻译：管理计算能力的分配
公开(公告)号：US08495648B1
公开(公告)日：2013-07-23
申请号：US13037258
申请日：2011-02-28
申请人： Eric Jason Brandwine , James Alfred Gordon Greenfield , Diwakar Gupta
发明人： Eric Jason Brandwine , James Alfred Gordon Greenfield , Diwakar Gupta
IPC分类号： G06F9/46
CPC分类号： H04L43/04 , G06F9/505
摘要： Systems and methods are described for managing requests for computing capacity from a provider of computing resources. The computing resources may include program execution capabilities, data storage or management capabilities, network bandwidth, etc. In some implementations, user requests are probabilistically denied or granted while some computing resources are still available. By denying some requests or granting only some, the rate of computing resource usage can be reduced, thus preserving some capacity for a longer period of time. In one embodiment, the capacity can be provided to clients based on client priority, provided to clients with reserved resources, provided to clients probabilistically, sold on a spot market, or allocated in some other fashion.
摘要翻译：描述了用于管理来自计算资源提供商的计算能力请求的系统和方法。计算资源可以包括程序执行能力，数据存储或管理能力，网络带宽等。在一些实现中，在某些计算资源仍然可用的情况下，概率地拒绝或授予用户请求。通过拒绝一些请求或仅授予一些请求，可以减少计算资源使用率，从而在较长时间内保留一些容量。在一个实施例中，可以基于客户端优先级向客户端提供容量，提供给具有预留资源的客户端，概率地提供给客户，在现货市场上出售或以某种其他方式分配。

27. 发明申请

US20130086662A1 PARAMETER BASED KEY DERIVATION 有权
标题翻译：基于参数的关键衍生
公开(公告)号：US20130086662A1
公开(公告)日：2013-04-04
申请号：US13248962
申请日：2011-09-29
申请人： Gregory B. Roth , Bradley Jeffery Behm , Eric D. Crahen , Cristian M. Ilac , Nathan R. Fitch , Eric Jason Brandwine , Kevin Ross O'Neill
发明人： Gregory B. Roth , Bradley Jeffery Behm , Eric D. Crahen , Cristian M. Ilac , Nathan R. Fitch , Eric Jason Brandwine , Kevin Ross O'Neill
IPC分类号： G06F21/00
CPC分类号： H04L9/0891 , G06F21/31 , G06F2221/2115 , H04L9/083 , H04L9/088 , H04L9/3247 , H04L63/08 , H04L2209/38 , H04L2463/061
摘要： Systems and methods for authentication generate keys from secret credentials shared between authenticating parties and authenticators. Generation of the keys may involve utilizing specialized information that, as a result of being used to generate the keys, renders the generated keys usable for a smaller scope of uses than the secret credential. Further, key generation may involve multiple invocations of a function where each of at least a subset of the invocations of the function results in a key that has a smaller scope of permissible use than a key produced from a previous invocation of the function. Generated keys may be used as signing keys to sign messages. One or more actions may be taken depending on whether a message and/or the manner in which the message was submitted complies with restrictions of the a key's use.
摘要翻译：用于认证的系统和方法从认证方和认证者之间共享的秘密凭证生成密钥。密钥的生成可以涉及利用专用信息，作为用于生成密钥的结果，使生成的密钥可用于比秘密凭证更小的使用范围。此外，密钥生成可以涉及函数的多次调用，其中函数的调用的至少一个子集中的每一个导致具有比从先前调用函数产生的密钥更小的允许使用范围的密钥。生成的密钥可以用作签名密钥来签名消息。取决于消息和/或提交消息的方式是否符合密钥使用的限制，可以采取一个或多个动作。

28. 发明授权

US08296434B1 Providing dynamically scaling computing load balancing 有权
标题翻译：提供动态缩放计算负载平衡
公开(公告)号：US08296434B1
公开(公告)日：2012-10-23
申请号：US12474145
申请日：2009-05-28
申请人： Kevin Christopher Miller , Eric Jason Brandwine
发明人： Kevin Christopher Miller , Eric Jason Brandwine
IPC分类号： G06F15/173 , G06F15/177
CPC分类号： G06F15/177 , H04L67/1004 , H04L67/1029
摘要： Techniques are described for providing load balancing functionality among multiple computing nodes. In some situations, the provided load balancing functionality includes dynamically scaling a group of multiple computing nodes for which the load balancing is performed, such as to dynamically expand and/or shrink the quantity of computing nodes in the group based on predefined criteria. At least some of the computing nodes of a group may be part of one or more physical computer networks in one or more geographical locations under control of a user or other entity, and at least some of the dynamic scaling of the group may use one or more other computing nodes that are part of a remote computer network (e.g., a virtual computer network provided under the control of a network-accessible service). The defined criteria used for the dynamic scaling may be determined in various manners and based on various factors.
摘要翻译：描述了在多个计算节点之间提供负载平衡功能的技术。在某些情况下，提供的负载平衡功能包括动态地缩放执行负载平衡的多个计算节点的一组，例如基于预定标准来动态地扩展和/或收缩组中的计算节点的数量。在用户或其他实体的控制下，组中的至少一些计算节点可以是一个或多个地理位置中的一个或多个物理计算机网络的一部分，并且组中的至少一些动态缩放可以使用一个或多个作为远程计算机网络（例如，在网络可访问服务的控制下提供的虚拟计算机网络）的一部分的更多其他计算节点。用于动态缩放的定义标准可以以各种方式并基于各种因素来确定。

29. 发明申请

US20120084113A1 VIRTUAL RESOURCE COST TRACKING WITH DEDICATED IMPLEMENTATION RESOURCES 有权
标题翻译：虚拟资源成本跟踪与专门的执行资源
公开(公告)号：US20120084113A1
公开(公告)日：2012-04-05
申请号：US12894883
申请日：2010-09-30
申请人： Eric Jason Brandwine , Marvin M. Theimer
发明人： Eric Jason Brandwine , Marvin M. Theimer
IPC分类号： G06Q10/00
CPC分类号： G06Q10/06312 , G06F9/4881 , G06F15/177 , G06Q30/06
摘要： Virtual resources may be provisioned in a manner that is aware of, and respects, underlying implementation resource boundaries. A customer of the virtual resource provider may specify that particular virtual resources are to be implemented with implementation resources that are dedicated to the customer. Dedicating an implementation resource to a particular customer of a virtual resource provider may establish one or more information barriers between the particular customer and other customers of the virtual resource provider. Implementation resources may require transition procedures, including custom transition procedures, to enter and exit dedicated implementation resource pools. Costs corresponding to active and inactive implementation resources in a dedicated pools associated with a particular customer may be accounted for, and presented to, the customer in a variety of ways including explicit, adjusted per customer and adjusted per type of virtual resource and/or implementation resource.
摘要翻译：虚拟资源可以以知道和尊重底层实施资源边界的方式来提供。虚拟资源提供商的客户可以指定使用专用于客户的实施资源来实现特定的虚拟资源。向虚拟资源提供商的特定客户授予实现资源可以在特定客户和虚拟资源提供商的其他客户之间建立一个或多个信息障碍。执行资源可能需要过渡程序，包括自定义过渡程序，以进入和退出专用的实施资源池。对应于与特定客户相关联的专用池中的主动和非活动实现资源的成本可以以各种方式被考虑并以各种方式呈现给客户，包括显式的，每个客户调整的和每种类型的虚拟资源和/或实现资源。

30. 发明授权

US07937438B1 Using virtual networking devices to manage external connections 有权
公开(公告)号：US07937438B1
公开(公告)日：2011-05-03
申请号：US12632696
申请日：2009-12-07
申请人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
发明人： Kevin Christopher Miller , Eric Jason Brandwine , Andrew J. Doane
IPC分类号： G06F15/16
CPC分类号： H04L41/0813 , H04L12/4641 , H04L41/12 , H04L45/00 , H04L45/02
摘要： Techniques are described for providing managed virtual computer networks that may have a configured logical network topology with one or more virtual networking devices, with corresponding networking functionality provided for communications between multiple computing nodes of the virtual computer network by emulating functionality that would be provided by the networking devices if they were physically present. In some situations, the emulating of networking device functionality includes receiving routing communications directed to the networking devices and using included routing information to update the configured network topology for the managed computer network. In addition, the techniques may further include supporting interactions with devices that are external to the virtual computer network, including remote physical networking devices that are part of a remote computer network configured to interoperate with the virtual computer network, and/or specialized network devices that are accessible via a substrate network on which the virtual computer network is overlaid.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式